Hacker News Reader

this one seems to produce quite a lot of false-positives though, doesn't it?

Those all look like XSS vulnerabilities to me.

Of course this is a pretty good starting point to find XSS, but I still see quite a few false positives:

a lot others look similar, plus it depends on context...

Yes, sure. Those two do not reveal vulnerabilities just from the results, but I have to wonder at not using templates on the first.